Skip to content

chore(deps-dev): bump js-yaml from 5.4.3 to 5.5.0 - #307

Merged
dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-5.5.0
Oct 20, 2026
Merged

dhensby merged 1 commit into
masterfrom
dependabot/npm_and_yarn/js-yaml-5.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps js-yaml from 5.4.3 to 5.5.0.

Changelog

Sourced from js-yaml's changelog.

[5.5.0] - 2026-10-16

Changed

  • Updated argparse to v3.
  • Updated development dependencies.

Fixed

  • Correct percent-encoding of shorthand and verbatim tags.
  • Reject ,, ], and } at the start of block plain scalars, #801.
  • Report the exact position of non-printable characters in errors, #801.
Commits
  • cb62b2d 5.5.0 released
  • 87aed90 Deps bump
  • 3aec511 Fix error positions for non-printable characters, #801
  • 11aa483 Reject flow indicators at the start of block plain scalars, #801
  • 339d8e0 Refactor tag encoder and decoder to match the YAML specification
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Oct 19, 2026

@dhensby dhensby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review of head ab563e6

Check Result
PR provenance Author dependabot[bot]. 1 commit(s), each signed by GitHub.
Diff scope package-lock.json, package.json
Integrity The lockfile hash of each new version matches the npm registry.
Install scripts No new preinstall, install or postinstall script.
CI 18 of 18 checks passed.
Package Change Dependency Publisher Provenance or source
js-yaml 5.4.3 → 5.5.0 (minor) dev, direct vitaly, same as 5.4.3 No provenance (5.4.3 had none). gitHead cb62b2d = tag 5.5.0 in nodeca/js-yaml
argparse 2.0.1 → 3.0.3 (major) dev, transitive vitaly, same as 2.0.1 No provenance (2.0.1 had none). gitHead 40086ea = tag 3.0.3 in nodeca/argparse

Compatibility evidence: CI.

Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 5.4.3 to 5.5.0.
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.3...5.5.0)

---
updated-dependencies:
- dependency-name: js-yaml
  dependency-version: 5.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/js-yaml-5.5.0 branch from ab563e6 to 933b83d Compare October 20, 2026 23:06

@dhensby dhensby left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot review of head 933b83d

Check Result
PR provenance Author dependabot[bot]. 1 commit(s), each signed by GitHub.
Diff scope package-lock.json, package.json
Integrity The lockfile hash of each new version matches the npm registry.
Install scripts No new preinstall, install or postinstall script.
CI 18 of 18 checks passed.
Package Change Dependency Publisher Provenance or source
js-yaml 5.4.3 → 5.5.0 (minor) dev, direct vitaly, same as 5.4.3 No provenance (5.4.3 had none). gitHead cb62b2d = tag 5.5.0 in nodeca/js-yaml
argparse 2.0.1 → 3.0.3 (major) dev, transitive vitaly, same as 2.0.1 No provenance (2.0.1 had none). gitHead 40086ea = tag 3.0.3 in nodeca/argparse

Compatibility evidence: CI.

@dhensby
dhensby merged commit 63491ed into master Oct 20, 2026
18 checks passed
@dhensby
dhensby deleted the dependabot/npm_and_yarn/js-yaml-5.5.0 branch October 20, 2026 23:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant